Artisan Ava

Are scope, spend, and authority enforced while the agent runs?

The vendor publishes role-based access and per-campaign rules the customer can change at any time. Configurable rules, not an enforced spend or authority limit.

Our automated recount on Sep 4, 2026 counted enough evidenced fields for 2/3. It never reads what those fields say, so it does not overturn the score above, judged on Sep 6, 2026 — but where the two disagree it is a reason to read this dimension again. Why there are two scores

Counts Permission scopes, each cited below.

Is there a tamper-evident record of what it actually did?

The vendor lists an audit log alongside role-based access. Its existence is claimed in a feature line; nothing describes retention, scope, tamper-evidence or customer review.

Counts Audit trail, each cited below.

Are compliance obligations attached per engagement?

The vendor states SOC 2 Type II and GDPR. A named certification, but no certificate, auditor or report date is published on the page checked.

Counts Compliance certifications, each cited below.

Does payment depend on a verified result?

No public evidence found: no outcome-linked payment term is published.

Can the deployment be insured, and is the customer indemnified?

No public evidence found: no carrier, cover, limit or customer indemnity is published.